Thanks, Dave, but time sync doesn't appear to be an issue. The official instructions' tests to see whether SRV records work.
On the Windows side, if I attempt to create a trust, it throws the error:
"The Local Security Authority is unable to obtain an RPC connection to the Active Directory Domain Controller XXX. Please check that the name can be resolved and that the server is available."
So I guess I'm still a little confused.
--- Justin Smith IT Analyst MIM Software, Inc. [ https://www.mimsoftware.com/ | https://www.mimsoftware.com ]
----- Original Message ----- From: "freeipa-users" freeipa-users@lists.fedorahosted.org To: "freeipa-users" freeipa-users@lists.fedorahosted.org Cc: "David McDaniel" dmac1guru@gmail.com Sent: Thursday, November 9, 2017 11:51:41 AM Subject: [Freeipa-users]Re: Trouble with AD Trust
Hello Justin, While waiting on a response from the more experienced on here than I.
I would double check time sync is correct between AD DC and IPA DC. Also; The AD DC will do a _srv_ record lookup for the IPA DC then attempt connection to the Samba instance on said IPA DC from my understanding. So double check DNS from AD perspective as well. Hope that helps. -Dave
_______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org